180K INTERNET-EXPOSED SONICWALL FIREWALLS VULNERABLE TO DOS ATTACKS, POSSIBLY RCE

Summary from the TLDR InfoSec newsletter

Most internet-facing SonicWall firewalls are unpatched for two high-severity vulnerabilities, allowing remote DoS and potentially RCE without authentication. CVE-2022-22274 and CVE-2023-0656 stem from code reuse issues. Patches were released in 2022 and 2023, but over 178,000 devices remain vulnerable. Exploitation can repeatedly crash devices, disrupting operations.